Chrome 142 Update Patches 20 Security Flaws Enabling Code Execution

Google has released Chrome version 142 to the stable channel, addressing 20 security flaws that could allow attackers to execute malicious code on affected systems.

The update, rolling out to Windows, Mac, and Linux users, includes seven high-severity vulnerabilities, many of which affect the V8 JavaScript engine, and CVEs: CVE-2025-12428, CVE-2025-12429, CVE-2025-12430, CVE-2025-12431, CVE-2025-12432, CVE-2025-12433, CVE-2025-12036, CVE-2025-12434, CVE-2025-12435, CVE-2025-12436, CVE-2025-12437, CVE-2025-12438, CVE-2025-12439, CVE-2025-12440, CVE-2025-12441, CVE-2025-12443, CVE-2025-12444, CVE-2025-12445, CVE-2025-12446, CVE-2025-12447.

Two of the most critical flaws, CVE-2025-12428 and CVE-2025-12429, earned researchers $50,000 bounties each for discoveries in V8. Notably, Google’s Big Sleep security initiative contributed several discoveries, and security researchers were rewarded with bounties totalling over $140,000 in this cycle.

Chrome 142.0.7444.59 for Linux, and 142.0.7444.60 for Windows and Mac, will be deployed to users over the coming days and weeks, with Google restricting detailed bug information until most users have received patches. Organisations running Chrome in enterprise environments are urged to prioritise testing and deploying this update to maintain a secure posture.